Traffic Trace Info
DumpFile: 201211081400.dump
FileSize: 3619.83MB
Id: 201211081400
StartTime: Thu Nov 8 14:00:01 2012
EndTime: Thu Nov 8 14:15:01 2012
TotalTime: 899.78 seconds
TotalCapSize: -1279.41MB CapLen: 96 bytes
# of packets: 52640936 (26000.34MB)
AvgRate: 242.37Mbps stddev:49.21M
IP flow (unique src/dst pair) Information
# of flows: 12407214 (avg. 4.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.2% 2.3% 1.6% 1.4% 1.4% 1.3% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 9577671
Top 10 bandwidth usage (bytes/total in %):
19.4% 16.6% 8.4% 7.4% 5.2% 4.8% 3.7% 2.5% 2.3% 1.7%
# of IPv6 addresses: 9224
Top 10 bandwidth usage (bytes/total in %):
28.0% 27.0% 8.9% 3.5% 2.8% 2.6% 2.2% 1.8% 1.8% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211081400.pktlen.png)
detailed numbers
[ 32- 63]: 20890691
[ 64- 127]: 12503648
[ 128- 255]: 956357
[ 256- 511]: 793626
[ 512- 1023]: 875509
[ 1024- 2047]: 16621105
Protocol Breakdown
![[protocol breakdown chart]](201211081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52640936 (100.00%) 27263327427 (100.00%) 517.91
ip 50753601 ( 96.41%) 25458716808 ( 93.38%) 501.61
tcp 25160496 ( 47.80%) 22710429088 ( 83.30%) 902.62
http(s) 15218204 ( 28.91%) 19130852174 ( 70.17%) 1257.10
http(c) 7249139 ( 13.77%) 1996598950 ( 7.32%) 275.43
squid 140588 ( 0.27%) 123776609 ( 0.45%) 880.42
smtp 73883 ( 0.14%) 29878226 ( 0.11%) 404.40
ftp 17689 ( 0.03%) 4771324 ( 0.02%) 269.73
pop3 33714 ( 0.06%) 3627941 ( 0.01%) 107.61
imap 5721 ( 0.01%) 2389738 ( 0.01%) 417.71
telnet 34086 ( 0.06%) 3998982 ( 0.01%) 117.32
ssh 96918 ( 0.18%) 81973141 ( 0.30%) 845.80
dns 18002 ( 0.03%) 2975680 ( 0.01%) 165.30
bgp 680 ( 0.00%) 225407 ( 0.00%) 331.48
napster 6 ( 0.00%) 366 ( 0.00%) 61.00
realaud 6 ( 0.00%) 824 ( 0.00%) 137.33
rtsp 3693 ( 0.01%) 232257 ( 0.00%) 62.89
icecast 22448 ( 0.04%) 19062340 ( 0.07%) 849.18
hotline 114 ( 0.00%) 7988 ( 0.00%) 70.07
other 2245604 ( 4.27%) 1310057081 ( 4.81%) 583.39
udp 2618978 ( 4.98%) 1138389338 ( 4.18%) 434.67
dns 561012 ( 1.07%) 192706432 ( 0.71%) 343.50
rip 4 ( 0.00%) 288 ( 0.00%) 72.00
realaud 5 ( 0.00%) 435 ( 0.00%) 87.00
halflif 16 ( 0.00%) 1588 ( 0.00%) 99.25
starcra 23 ( 0.00%) 2827 ( 0.00%) 122.91
everque 221 ( 0.00%) 41991 ( 0.00%) 190.00
unreal 7 ( 0.00%) 1060 ( 0.00%) 151.43
quake 42 ( 0.00%) 3135 ( 0.00%) 74.64
cuseeme 3 ( 0.00%) 228 ( 0.00%) 76.00
other 2057571 ( 3.91%) 945584019 ( 3.47%) 459.56
icmp 22287906 ( 42.34%) 1413419218 ( 5.18%) 63.42
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 24714 ( 0.05%) 10074724 ( 0.04%) 407.65
ip6 605460 ( 1.15%) 170497279 ( 0.63%) 281.60
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 55846 ( 0.11%) 15886931 ( 0.06%) 284.48
frag 70445 ( 0.13%) 71812902 ( 0.26%) 1019.42
ip6 1887333 ( 3.59%) 1804610499 ( 6.62%) 956.17
tcp6 1740011 ( 3.31%) 1731529531 ( 6.35%) 995.13
http(s) 1193032 ( 2.27%) 1214748440 ( 4.46%) 1018.20
http(c) 212454 ( 0.40%) 25588974 ( 0.09%) 120.44
smtp 324 ( 0.00%) 129335 ( 0.00%) 399.18
ftp 212 ( 0.00%) 24146 ( 0.00%) 113.90
imap 187 ( 0.00%) 24310 ( 0.00%) 130.00
ssh 68 ( 0.00%) 11584 ( 0.00%) 170.35
dns 246 ( 0.00%) 39826 ( 0.00%) 161.89
bgp 101 ( 0.00%) 29006 ( 0.00%) 287.19
other 333387 ( 0.63%) 490933910 ( 1.80%) 1472.56
udp6 119347 ( 0.23%) 68589772 ( 0.25%) 574.71
dns 71891 ( 0.14%) 21277075 ( 0.08%) 295.96
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 2 ( 0.00%) 211 ( 0.00%) 105.50
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
other 47452 ( 0.09%) 47312272 ( 0.17%) 997.06
icmp6 26483 ( 0.05%) 3113747 ( 0.01%) 117.58
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1377 ( 0.00%) 1361821 ( 0.00%) 988.98
tcpdump file: 201211081400.dump.gz (1109.78 MB)